]>
Commit | Line | Data |
---|---|---|
1 | import express from 'express' | |
2 | import { OAuthClientModel } from '@server/models/oauth/oauth-client' | |
3 | import { HttpStatusCode, OAuthClientLocal } from '@shared/models' | |
4 | import { logger } from '../../helpers/logger' | |
5 | import { CONFIG } from '../../initializers/config' | |
6 | import { asyncMiddleware, openapiOperationDoc } from '../../middlewares' | |
7 | ||
8 | const oauthClientsRouter = express.Router() | |
9 | ||
10 | oauthClientsRouter.get('/local', | |
11 | openapiOperationDoc({ operationId: 'getOAuthClient' }), | |
12 | asyncMiddleware(getLocalClient) | |
13 | ) | |
14 | ||
15 | // Get the client credentials for the PeerTube front end | |
16 | async function getLocalClient (req: express.Request, res: express.Response, next: express.NextFunction) { | |
17 | const serverHostname = CONFIG.WEBSERVER.HOSTNAME | |
18 | const serverPort = CONFIG.WEBSERVER.PORT | |
19 | let headerHostShouldBe = serverHostname | |
20 | if (serverPort !== 80 && serverPort !== 443) { | |
21 | headerHostShouldBe += ':' + serverPort | |
22 | } | |
23 | ||
24 | // Don't make this check if this is a test instance | |
25 | if (process.env.NODE_ENV !== 'test' && req.get('host') !== headerHostShouldBe) { | |
26 | logger.info('Getting client tokens for host %s is forbidden (expected %s).', req.get('host'), headerHostShouldBe) | |
27 | return res.fail({ | |
28 | status: HttpStatusCode.FORBIDDEN_403, | |
29 | message: `Getting client tokens for host ${req.get('host')} is forbidden` | |
30 | }) | |
31 | } | |
32 | ||
33 | const client = await OAuthClientModel.loadFirstClient() | |
34 | if (!client) throw new Error('No client available.') | |
35 | ||
36 | const json: OAuthClientLocal = { | |
37 | client_id: client.clientId, | |
38 | client_secret: client.clientSecret | |
39 | } | |
40 | return res.json(json) | |
41 | } | |
42 | ||
43 | // --------------------------------------------------------------------------- | |
44 | ||
45 | export { | |
46 | oauthClientsRouter | |
47 | } |